# Product Approval for Code Deletion in nitro-web ### User Census Exports This page does not work in production (it does not display results). You can generate a CSV export and get user data out of it. When I attempted it in QA, it took over 10 minutes. Discovered because it possesses a * [ ] URL: https://nitroqa.powerhrg.com/user_profile/user_census_exports * [ ] Who has permission (`:user_census_export, :user_census_export`) * [ ] this is actually accessible by a lot of people, which is a bit odd because it contains user data. Roles that can access include: * [ ] system_admin * [ ] confirmation_manager * [ ] student_developer * [ ] nitro_bots * [ ] data_analyst * [ ] ux_staff * [ ] nitro_support * [ ] project_manager_pmo * [ ] nitro_systems_manager * [ ] nitro_analyst * [ ] producteer * [ ] nitro_qa_ninja * [ ] Git history (moved into the new component 4 years ago, only HFH-related maintenance work since then) * [ ] Deleted in isolated PR (no issues here. This entire report seems isolated.) ### Special Event Requests We asked about this when we were working on org levels: https://nitro.powerhrg.com/runway/backlog_items/HFH-1427. * [ ] URL: https://nitroqa.powerhrg.com/user_requests/new * [ ] Who has permission: it looks like requesting a special event is available to everyone on the request dropdown * [ ] History: there are currently 372 special event requests, the last one was created by user 817 ( JCarnevale) in November 2021 * [ ] Deleted in isolated PR (will need to update the dropdown, but otherwise it can be isolated) ### Venue Types This page was flagged with a security vulnerability. * [ ] URL: https://nitroqa.powerhrg.com/corporate_events/venue_types * [ ] Who has permission: for the index page, the only auth check is a login :( for the rest, (`:manage, VenueType`) is only accessible to System Admins (Tim, Nitro, and Laura) * [ ] Git history: only maintenance since it was moved there 5 years ago. Last venue type created 2016 * [ ] Deleted in isolated PR: the idea is to just remove the CRUD pages, since they seem unused. We'd also potentially want to remove the association on Venue and the venue type from that page. I've included a query of events that reference a venue with a venue type. There aren't very many recent ones: ```ruby [22] pry(main)> CorporateEvents::CorporateEvent.joins(:venue).where.not(venues: {venue_type_id: nil}).last(5).pluck(:name, :created_at) CorporateEvents::CorporateEvent Load (1.9ms) SELECT `corporate_events`.* FROM `corporate_events` INNER JOIN `venues` ON `venues`.`id` = `corporate_events`.`venue_id` WHERE `venues`.`venue_type_id` IS NOT NULL ORDER BY `corporate_events`.`id` DESC LIMIT 5 => [["New Hires 3.17-3.19", Wed, 04 Mar 2020 13:40:14 EST -05:00], ["NITRO CREATE 2021.6", Wed, 09 Jun 2021 18:45:24 EDT -04:00], ["2022 PVI Summit", Fri, 26 Aug 2022 09:58:36 EDT -04:00], ["Cultural Diversity & Inclusion Summit 2023", Tue, 09 May 2023 14:48:09 EDT -04:00], ["***** TEST TRAINING ***** Queer Power Leadership Workshop", Thu, 29 Jun 2023 12:29:45 EDT -04:00]] ```